CVE-2026-42415 WordPress Porto Theme - Functionality plugin <= 3.9.3 - SQL Injection vulnerability

Unauthenticated SQL Injection in Porto Theme - Functionality = 3.9.3 versions...

CVE-2026-42415

The Porto Theme - Functionality plugin for WordPress (versions

EUVD-2026-93053

Subscriber SQL Injection in UDesign Core = 4.15.0 versions...

CVE-2026-42416 WordPress UDesign Core plugin <= 4.15.0 - SQL Injection vulnerability

Subscriber SQL Injection in UDesign Core = 4.15.0 versions...

CVE-2026-42414

The ListingPro plugin for WordPress versions

CVE-2026-42414 WordPress ListingPro plugin <= 2.9.12 - SQL Injection vulnerability

Subscriber SQL Injection in ListingPro = 2.9.12 versions...

CVE-2026-42414 WordPress ListingPro plugin <= 2.9.12 - SQL Injection vulnerability

Subscriber SQL Injection in ListingPro = 2.9.12 versions...

EUVD-2026-93051

Subscriber SQL Injection in ListingPro = 2.9.12 versions...

CVE-2026-41555 WordPress Newsletter Subscription Form – User Subscriptions Form, Capture Email plugin <= 1.5.9 - SQL Injection vulnerability

Unauthenticated SQL Injection in Newsletter Subscription Form – User Subscriptions Form, Capture Email = 1.5.9 versions...

CVE-2026-41555 WordPress Newsletter Subscription Form – User Subscriptions Form, Capture Email plugin <= 1.5.9 - SQL Injection vulnerability

Unauthenticated SQL Injection in Newsletter Subscription Form – User Subscriptions Form, Capture Email = 1.5.9 versions...

CVE-2026-41555

The Newsletter Subscription Form – User Subscriptions Form, Capture Email WordPress plugin (versions

EUVD-2026-93045

Unauthenticated SQL Injection in Newsletter Subscription Form – User Subscriptions Form, Capture Email = 1.5.9 versions...

CVE-2026-39795

The SendPress Newsletters plugin for WordPress (versions

CVE-2026-39795 WordPress SendPress Newsletters plugin <= 1.26.1.20 - SQL Injection vulnerability

Unauthenticated SQL Injection in SendPress Newsletters = 1.26.1.20 versions...

EUVD-2026-93039

Unauthenticated SQL Injection in SendPress Newsletters = 1.26.1.20 versions...

CVE-2026-39795 WordPress SendPress Newsletters plugin <= 1.26.1.20 - SQL Injection vulnerability

Unauthenticated SQL Injection in SendPress Newsletters = 1.26.1.20 versions...

EUVD-2026-93031

Unauthenticated SQL Injection in Gmedia Photo Gallery = 1.25.1 versions...

CVE-2026-39785

The Gmedia Photo Gallery plugin for WordPress (versions

CVE-2026-39785 WordPress Gmedia Photo Gallery plugin <= 1.25.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Serhii Pasyuk Gmedia Photo Gallery grand-media allows Blind SQL Injection.This issue affects Gmedia Photo Gallery: from n/a through 1.25.1...

CVE-2026-39785 WordPress Gmedia Photo Gallery plugin <= 1.25.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Serhii Pasyuk Gmedia Photo Gallery grand-media allows Blind SQL Injection.This issue affects Gmedia Photo Gallery: from n/a through 1.25.1...